$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/9342a4f8-1ee7-3e8d-9bcc-649de93b1eb2.roa File: 9342a4f8-1ee7-3e8d-9bcc-649de93b1eb2.roa (raw, json) Hash identifier: Aq9zhfsoPFy5Rws3aTrjlEnfAHAvGXt9R4XXBskp8jM= Subject key identifier: D0:D6:E8:CF:E5:E8:06:2E:F0:32:DC:4B:1E:F7:26:CE:FD:50:10:47 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584B5DD1F6E94DA0BC8BEFAA5A80 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/9342a4f8-1ee7-3e8d-9bcc-649de93b1eb2.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 26955 IP address blocks: 65.127.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f6:e9:4d:a0:bc:8b:ef:aa:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=c99ad595-63de-4ff0-b6b5-f931ccd1098a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:33:ab:40:4d:45:c1:cb:33:af:5b:fa:a6:f0: b5:ba:19:e6:4b:0a:21:c2:bb:6c:ce:b0:6a:54:ba: 9f:cd:e8:0c:fe:99:7a:89:bc:64:d1:0e:74:9f:37: 40:fb:4e:64:14:e4:63:54:b0:2f:85:0f:50:ad:2e: 00:1d:52:75:ad:00:f4:4a:d9:ed:12:df:2e:de:32: ba:61:a6:49:d1:d5:18:04:68:5e:5d:62:34:81:5b: 03:5a:34:21:87:c9:c0:1d:a3:99:71:9f:80:af:15: 1a:33:a7:af:33:62:4d:8f:79:76:ba:28:93:51:e9: 73:74:94:65:a3:82:91:6b:34:45:42:e3:8f:16:aa: 86:4c:9e:c9:fa:3e:32:36:ff:f6:66:c2:e4:80:71: c1:6b:81:99:da:81:c4:d6:2c:57:e8:75:85:08:a9: 05:98:4d:e1:ba:af:70:61:8c:e5:79:b6:77:c1:56: 2a:87:bb:23:29:53:37:6d:91:c6:fb:9a:14:3a:60: d5:83:f8:d1:0e:1a:af:5e:4d:18:4f:c6:e4:ec:5b: ce:43:fa:40:8c:3d:63:7f:9a:d1:da:af:7c:22:bd: ca:2c:93:74:1f:51:01:77:44:5a:ef:c9:b8:87:29: b0:5a:c5:a6:7b:36:38:9d:cf:dd:dc:40:ff:c4:72: 71:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D6:E8:CF:E5:E8:06:2E:F0:32:DC:4B:1E:F7:26:CE:FD:50:10:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/9342a4f8-1ee7-3e8d-9bcc-649de93b1eb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 65.127.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:4a:34:c4:93:b8:ea:b9:66:d8:11:c6:ef:9f:57:ff:71:e3: 4e:f5:e5:19:30:00:27:10:d1:d0:52:93:87:65:8f:96:39:05: 29:85:6a:7c:ee:da:30:c4:5f:69:45:07:22:33:7d:f9:cb:0c: 77:2f:17:df:ff:8a:83:b8:fd:1f:b7:69:56:7a:ac:da:9d:55: 46:c9:97:57:7d:bf:8c:6d:27:b3:fe:c2:21:6a:30:87:7e:ed: 61:10:f0:be:06:17:72:e8:2c:53:2d:54:19:da:d3:e9:b8:2c: 55:87:56:aa:3e:52:f3:4c:0d:fd:1a:94:37:64:68:00:fe:ca: 8e:cf:1f:44:ab:3e:f7:ce:99:f7:5a:12:7c:db:ac:ed:86:fd: 11:97:db:ba:0f:fa:03:f9:e5:6e:ab:4c:4e:ef:49:0a:ce:d5: 71:cb:c3:6d:8e:c3:98:32:f5:e6:cf:d2:0c:42:ec:53:13:0e: 09:97:a0:86:e6:e3:b0:8f:51:71:42:77:f7:c4:3b:e4:ea:a3: 85:9d:7c:16:77:20:c4:54:37:96:f7:70:ff:07:fc:3a:58:f4: ba:5f:be:bc:38:13:01:5a:37:cb:a5:82:e7:d2:be:59:35:2e: fd:51:7c:a8:9b:97:a3:87:d1:58:28:94:fd:66:6a:a2:5e:c7: 5b:27:74:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fbpTaC8i++qWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk Yzk5YWQ1OTUtNjNkZS00ZmYwLWI2YjUtZjkzMWNjZDEwOThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTOrQE1Fwcszr1v6pvC1uhnmSwohwrtszrBq VLqfzegM/pl6ibxk0Q50nzdA+05kFORjVLAvhQ9QrS4AHVJ1rQD0StntEt8u3jK6 YaZJ0dUYBGheXWI0gVsDWjQhh8nAHaOZcZ+ArxUaM6evM2JNj3l2uiiTUelzdJRl o4KRazRFQuOPFqqGTJ7J+j4yNv/2ZsLkgHHBa4GZ2oHE1ixX6HWFCKkFmE3huq9w YYzlebZ3wVYqh7sjKVM3bZHG+5oUOmDVg/jRDhqvXk0YT8bk7FvOQ/pAjD1jf5rR 2q98Ir3KLJN0H1EBd0Ra78m4hymwWsWmezY4nc/d3ED/xHJxLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDW6M/l6AYu8DLcSx73Js79UBBHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvOTM0MmE0ZjgtMWVlNy0z ZThkLTliY2MtNjQ5ZGU5M2IxZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQX+BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBKNMSTuOq5ZtgRxu+fV/9x40715RkwACcQ0dBSk4dlj5Y5BSmFanzu 2jDEX2lFByIzffnLDHcvF9//ioO4/R+3aVZ6rNqdVUbJl1d9v4xtJ7P+wiFqMId+ 7WEQ8L4GF3LoLFMtVBna0+m4LFWHVqo+UvNMDf0alDdkaAD+yo7PH0SrPvfOmfda EnzbrO2G/RGX27oP+gP55W6rTE7vSQrO1XHLw22Ow5gy9ebP0gxC7FMTDgmXoIbm 47CPUXFCd/fEO+Tqo4WdfBZ3IMRUN5b3cP8H/DpY9Lpfvrw4EwFaN8ulgufSvlk1 Lv1RfKibl6OH0VgolP1maqJex1sndFw= -----END CERTIFICATE-----Generated at Sat Oct 11 11:28:56 2025 by rpki-client